Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
File:                     AahezixTn1hQ-nAfLUWiEn3IZ1U.mft (raw, json)
Hash identifier:          VEYsJhItdWA/GualM/BAT/KIVaPRtnY13ZXr0cE8+6M=
Subject key identifier:   5B:6B:C0:79:76:61:4D:7C:50:52:B5:47:EC:57:67:47:A0:5A:FC:EF
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Certificate issuer:       /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial:       01962E98C84B771EADE2F96971D4D7E2A92F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
Manifest number:          078F
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: 1YtqoFQLtfGDiVmHDelz4DRg3EU.roa (hash: IK9E4boh47Pzwtuw3Las8hTZNUl+rwA5t6hlkkr2bx4=)
                          2: AahezixTn1hQ-nAfLUWiEn3IZ1U.crl (hash: 2B0+pyPOl/bkjrhDS3gP3vcMx3d62DeyAi9Ym6cSyjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c8:4b:77:1e:ad:e2:f9:69:71:d4:d7:e2:a9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=5b6bc07976614d7c5052b547ec576747a05afcef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:d9:e7:f3:50:d7:b1:e7:51:31:95:ec:e9:
                    78:61:2c:9c:f3:51:76:1c:9c:99:46:74:63:d9:83:
                    81:74:03:30:5a:e0:e8:a0:8c:64:ab:d7:28:da:cf:
                    27:0e:9c:70:00:c1:d8:a1:f0:fc:42:73:79:4c:45:
                    13:c8:b3:62:8e:21:71:dc:ae:93:b7:35:10:18:99:
                    e8:6c:19:83:96:bd:36:1e:c5:40:80:1e:21:66:17:
                    9f:0c:be:d3:4a:7b:73:45:d6:9e:8f:d3:6e:08:65:
                    ff:7d:31:bc:8b:2f:71:78:51:78:d6:5f:b0:52:31:
                    f2:e1:bf:89:a5:7f:c7:4f:c7:44:77:1a:4f:75:f7:
                    75:fb:70:42:42:14:b2:54:e8:a6:96:26:41:20:84:
                    5d:3c:4c:7d:d6:fb:c2:b0:a6:d2:5d:ce:cb:d0:9f:
                    72:09:2a:42:49:e9:6b:e2:0d:95:65:f8:f4:87:c3:
                    a8:ee:14:c2:35:4c:47:37:2f:d0:4e:36:32:cf:27:
                    b2:e2:f3:b0:99:bf:5d:08:84:82:b4:66:94:d9:37:
                    1f:38:09:6d:53:eb:97:94:10:e5:e4:d5:8d:3e:65:
                    05:84:cb:b9:e3:a1:39:55:b5:81:cb:46:1f:c9:5b:
                    8e:7c:71:d1:1d:96:ca:db:48:d3:74:b4:46:95:9c:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6B:C0:79:76:61:4D:7C:50:52:B5:47:EC:57:67:47:A0:5A:FC:EF
            X509v3 Authority Key Identifier:
                keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:1d:b6:6f:aa:f5:86:92:a1:a0:85:c6:65:65:31:ac:9d:
         c7:65:c6:09:e6:58:b9:61:18:a5:1a:ae:7e:ac:7c:c9:26:1b:
         9e:67:8e:3d:df:65:27:7a:a2:71:8e:eb:c0:fc:58:02:72:d9:
         5a:c3:bd:9b:05:ac:f2:f2:5d:2b:84:40:fd:b2:f5:e2:34:98:
         97:4f:1d:1e:a2:27:3f:87:a8:51:d1:de:d2:ca:b3:75:f7:c2:
         bf:0c:47:95:d8:b1:74:2e:27:d7:0f:d1:59:1f:a2:84:60:ab:
         67:64:e2:c1:74:62:f3:0c:49:2f:66:a5:4d:07:d8:22:b1:f3:
         ad:75:28:2d:c3:93:39:ed:0d:f8:b7:e4:92:0d:0e:ac:92:c4:
         a3:50:a9:6d:81:97:b1:61:c1:35:2f:38:c8:3e:ce:21:03:ec:
         55:69:8e:7f:e2:6b:5b:64:df:99:33:5e:98:7e:9f:81:eb:56:
         7e:95:61:8b:bd:8e:e2:c6:87:eb:b6:2e:b7:d4:69:d0:4c:14:
         44:a1:3f:99:ea:72:9c:42:3c:ae:bf:87:03:d1:1f:6e:c7:a6:
         8b:9a:ef:b7:30:68:ab:89:16:8f:9a:88:fb:0f:21:c9:d7:66:
         37:aa:a5:dc:92:a5:f8:83:30:97:2a:b6:53:1c:82:f4:e0:29:
         80:97:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----